chore(deps): update ferrlabs/.github digest to 6b7ce7f

[ferrlabs-renovate]

This PR contains the following updates:

Package	Type	Update	Change
FerrLabs/.github (changelog)	workflow	digest	1a21d23 → 6b7ce7f

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[ferrfleet]

Digest bump only, three pinned refs updated consistently, full SHAs kept with the # main comment.

Checked what the range actually contains: 1a21d234..6b7ce7f3 is a single upstream commit, FerrLabs/.github#383, which changes reusable-ci-node.yml, reusable-ci-astro.yml, default.json and the workflow templates (the @ferrlabs npm registry default moves to npmjs.org). None of the three reusables this repo consumes (reusable-pr-title.yml, reusable-ferrflow-release.yml, reusable-security-scan.yml) changed, so behaviour here is unaffected. The .npmrc caveat in that commit's README does not apply: this repo has no Node package, the generator is Rust.

Nit: the two zizmor secrets: inherit alerts the code-scanning bot posted are on pre-existing lines that this diff does not modify, only re-flagged because the file was touched. Nothing for this PR to fix.